| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash9e164a845d32db8fa51fdb5b1aa218d9 169099b4d2f8e119ab6cf6fca279b6fb535b1759 402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6119
Expires: Tue, 08 Nov 2022 18:59:17 GMT
Date: Tue, 08 Nov 2022 17:17:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash9a21dcd6794c5ba4178522096f695511 d731cf49db5e048d0d820d5cee03417cdd8c1c7b c4981ce849fcfce045d1c9eeb2978767d87fcbf6087626f3d6541ec8b1938a37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C4981CE849FCFCE045D1C9EEB2978767D87FCBF6087626F3D6541EC8B1938A37"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5046
Expires: Tue, 08 Nov 2022 18:41:24 GMT
Date: Tue, 08 Nov 2022 17:17:18 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash7908acd0c083145e2b454aaeb063c236 0696647bb0a4118327f637a50ebcc21bac39d592 ffc30b68df0b33d67f31e37bbf5ae5cf4c23e1c8b8197bf76a95ee06bec4cd36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1505
Cache-Control: max-age=149938
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:18 GMT
Etag: "636a2fef-1d7"
Expires: Thu, 10 Nov 2022 10:56:16 GMT
Last-Modified: Tue, 08 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HjrodGgZ1meAWan8GXoOC77vpqov+vYMhIRKCtMN2+o+urBYRwRZDdscUfau5p8IhmI79VXjMv8=
x-amz-request-id: 28WHZ6AX6TXGAWDS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 08 Nov 2022 17:11:23 GMT
age: 355
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 17:17:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| adonire.com/ene/qakbot.zip | 139.144.66.116 | 301 Moved Permanently | 0 B |
URL HTTP/1.1adonire.com/ene/qakbot.zip IP139.144.66.116:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /ene/qakbot.zip HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 08 Nov 2022 17:17:18 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://adonire.com/ene/qakbot.zip
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash2a47d129a3af5f02c654faf925c60273 9ad27ed9f4500c939260a677c12e702599b00fa9 0e031af077bf7009ffefada782407a247bbd31bddc96994c68de7bfe902bf992
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5883
Cache-Control: max-age=149250
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:19 GMT
Etag: "636a1c26-1d7"
Expires: Thu, 10 Nov 2022 10:44:49 GMT
Last-Modified: Tue, 08 Nov 2022 09:06:46 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.89.136.7 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.89.136.7:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mmYtkKNhvNsFU4IKs8NOnQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bfilB9s17jwlzAdz0iSX04iC8jU=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd6dbaa7f1a697305cfaabdc859cdb9d3 680fa363852fb33b9b76b83d3ba5c0a4c51499cb 2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashb10986024b7c43560e2e76cb10764ec4 dcb10e65ceffd902d240df3c5682be4388119a96 6b9d5fdaeaf7b5c35fa5db97477ec3cde32b64b54b44c0d48b41fef1857630e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash9271c1f6929f1e5fbdddf94238ff35ae 362b1bd3f9aa375300628e4057e196e407153598 1c44e31b33f40b03248cbeac5fb1e99fac3efb7e5cce23e81fe7fd4afa57352b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3131
Cache-Control: max-age=167390
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:20 GMT
Etag: "636a6dc3-117"
Expires: Thu, 10 Nov 2022 15:47:10 GMT
Last-Modified: Tue, 08 Nov 2022 14:54:59 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
|
|
| www.googletagmanager.com/gtag/js?id=G-VYF45RJCZ7 | 142.250.74.168 | 200 OK | 76 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-VYF45RJCZ7 IP142.250.74.168:0
File typeASCII text, with very long lines (18991) Hash8de8ef7556c345bd31364d50010cbae0 dedc2c5bc9ed30325d615697ff9e026f9488f039 1a8c608ce3be54653c792cae59e2bf79f4e36959838c22ef3051433bb7c35a1b
GET /gtag/js?id=G-VYF45RJCZ7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 08 Nov 2022 17:17:20 GMT
expires: Tue, 08 Nov 2022 17:17:20 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76014
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd6dbaa7f1a697305cfaabdc859cdb9d3 680fa363852fb33b9b76b83d3ba5c0a4c51499cb 2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashb10986024b7c43560e2e76cb10764ec4 dcb10e65ceffd902d240df3c5682be4388119a96 6b9d5fdaeaf7b5c35fa5db97477ec3cde32b64b54b44c0d48b41fef1857630e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| adonire.com/wp-content/plugins/smntcs-woocommerce-quantity-buttons/style.css?ver=1.23 | 139.144.66.116 | 200 OK | 377 B |
URL HTTP/2adonire.com/wp-content/plugins/smntcs-woocommerce-quantity-buttons/style.css?ver=1.23 IP139.144.66.116:0
File typeASCII text, with very long lines (338) Hashf24c02cf609f4399bd66b750fbd848f9 f706fd2a729adcb3bc3f4bff71e11a364ab9671e 5bdbd57e1d4cdc3c68a8ff86c6d5729fb915b0f4ef74248d222f788c314c5fa3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/smntcs-woocommerce-quantity-buttons/style.css?ver=1.23 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 09 Mar 2021 14:00:13 GMT
accept-ranges: bytes
content-length: 377
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/elementor/css/post-1.css?ver=1623511327 | 139.144.66.116 | 200 OK | 945 B |
URL HTTP/2adonire.com/wp-content/uploads/elementor/css/post-1.css?ver=1623511327 IP139.144.66.116:0
File typeASCII text, with very long lines (945), with no line terminators Hash2df540f2a6196fafb109003c6f27ecc5 ae7109aba8ddd1ed102e05ccea890207823822d5 185242006732c6c68342e0c88c66672ec46899e1adca6463d63c041d2fcebe4c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-1.css?ver=1623511327 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Jun 2021 15:22:07 GMT
accept-ranges: bytes
content-length: 945
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 | 139.144.66.116 | 200 OK | 669 B |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 IP139.144.66.116:0
File typeASCII text, with very long lines (483) Hash8a161c33ecf70101ce157be57abe027e 5b6ece1c735b57286f23ca42f4e20593b6b3c49d 1ada5259a5ac61a7d68315f7efa6b98d61d2d0478df0545869c880afeaa67dcd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 669
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=3.6.0 | 139.144.66.116 | 200 OK | 3.0 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=3.6.0 IP139.144.66.116:0
File typeASCII text, with very long lines (2967), with no line terminators Hash5a625f7100b0b0a4fde3444e3329311b 3718ad70c3779d2a9579b752024316f441a0fe1e 7c489dd2e13acb8940f20b68b9ae2225c53d71643b08609834043c174c4cedaa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=3.6.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:03 GMT
accept-ranges: bytes
content-length: 2967
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 | 139.144.66.116 | 200 OK | 2.6 kB |
URL HTTP/2adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 IP139.144.66.116:0
File typeASCII text, with very long lines (2630), with no line terminators Hasheade318fbed91c096467dffa56406638 69d306a2097e792f99c80a5e0bb8863260399cad d589803f3ab380582ab137b22493c2bacaa92424fa88cee212e80288cac11fbb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Mar 2021 14:16:07 GMT
accept-ranges: bytes
content-length: 2630
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/smntcs-woocommerce-quantity-buttons/button-handler.js?ver=1.23 | 139.144.66.116 | 200 OK | 1.4 kB |
URL HTTP/2adonire.com/wp-content/plugins/smntcs-woocommerce-quantity-buttons/button-handler.js?ver=1.23 IP139.144.66.116:0
File typeASCII text, with very long lines (1398), with no line terminators Hashf6233aca9ac9c0766bff1e51164087fc 6bf6d4685c704cbd6d1cec3f4940b02074f35b13 4b31ad29620860c3249603cfe3c59fafae81fe4bfa3533a055b3d30b30183d7d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/smntcs-woocommerce-quantity-buttons/button-handler.js?ver=1.23 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 09 Mar 2021 14:00:13 GMT
accept-ranges: bytes
content-length: 1398
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 | 139.144.66.116 | 200 OK | 1.8 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 IP139.144.66.116:0
File typeASCII text, with very long lines (1680) Hash943f6eb962c25bd965e0f0e5a284fcd0 b050a98ebaef01d7597bf8c1acb995c0ef3bcbd9 50de09b0bb8d0ac656aa9b3a1e4ef58a3f2d1abd734cad68b0e12191e9d215ea
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 1846
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.7.4 | 139.144.66.116 | 200 OK | 2.0 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.7.4 IP139.144.66.116:0
File typeASCII text, with very long lines (2047), with no line terminators Hash72095aaafd6f6cf97cf0187d3de394ca fe5f864f22ad4a794466c349ba9472b6f1922cc6 946e3771efeabcf9a23d88089ce6ef6cb94531e36775004483fd8e237275dc29
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.7.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 2047
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-includes/js/wp-embed.min.js?ver=5.8.6 | 139.144.66.116 | 200 OK | 1.4 kB |
URL HTTP/2adonire.com/wp-includes/js/wp-embed.min.js?ver=5.8.6 IP139.144.66.116:0
File typeASCII text, with very long lines (1391) Hash905225d5711b559d3092387d5ffbedbd 6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d 5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-embed.min.js?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 06 Jan 2021 20:59:24 GMT
accept-ranges: bytes
content-length: 1426
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 | 139.144.66.116 | 200 OK | 2.6 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 IP139.144.66.116:0
File typeASCII text, with very long lines (2577) Hash9bb8540493a7fe11b229870eb37be165 d77f17cb9057dc8f622b8c0bf23f6acb739b3b8e 4a7ee62eb33f3bbb66c2151e5cac6bf4904e28302efc36128f3e3ccae6fde580
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:49 GMT
accept-ranges: bytes
content-length: 2578
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.7.4 | 139.144.66.116 | 200 OK | 2.9 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.7.4 IP139.144.66.116:0
File typeASCII text, with very long lines (2939), with no line terminators Hash0d6826ff815ca2f7dda82315fb1c23cd 717da3a5931026032c263ae005f4010e0e383095 87894382e310f9665396860c5d592e7646d25bc92cae13f4c6439f9de986738f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.7.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 2939
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/popup-notices-for-woocommerce/src/assets/dist/frontend/css/ttt-pnwc.min.css?ver=210322-71758 | 139.144.66.116 | 200 OK | 6.1 kB |
URL HTTP/2adonire.com/wp-content/plugins/popup-notices-for-woocommerce/src/assets/dist/frontend/css/ttt-pnwc.min.css?ver=210322-71758 IP139.144.66.116:0
File typeASCII text, with very long lines (6003) Hash4624ac49238b93ed3542bcb2cb3d094b 46a6e3a5ae617e4a22f6fb0806b916c05768e3db 812048f8450235d2b011933e9abc835c267dd13709862e1d03974669ffa65b9e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/popup-notices-for-woocommerce/src/assets/dist/frontend/css/ttt-pnwc.min.css?ver=210322-71758 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Mar 2021 07:17:58 GMT
accept-ranges: bytes
content-length: 6112
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.7.4 | 139.144.66.116 | 200 OK | 3.0 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.7.4 IP139.144.66.116:0
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hash8bc2109ef48cabf7a26b73d7c3536c5f 0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b 8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.7.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 3037
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/blocks.style.build.css?ver=1606920735 | 139.144.66.116 | 200 OK | 8.8 kB |
URL HTTP/2adonire.com/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/blocks.style.build.css?ver=1606920735 IP139.144.66.116:0
File typeASCII text, with very long lines (8751) Hash7cf7f779e29c35516899c6f76cb78099 7c7263759308e24dc986ca2c9c412317d24e99b5 3887d41f59375d37b6b23c6cf2e0a8320cd99f1bd66248875974adc768cc1602
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/blocks.style.build.css?ver=1606920735 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Dec 2020 14:52:15 GMT
accept-ranges: bytes
content-length: 8752
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 | 139.144.66.116 | 200 OK | 4.6 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 IP139.144.66.116:0
File typeASCII text, with very long lines (4587) Hash7423529c58b1a1bf4ee735f7afbb59bd 52d72a236f4925e5bd2c0a173a03c7ca8a92bba8 e9286a9b5c5047627afb876ebe1c90933ee1c438164d529d01d80c4636c4b405
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 4626
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woo-product-bundle/assets/css/frontend.css?ver=5.8.6 | 139.144.66.116 | 200 OK | 8.3 kB |
URL HTTP/2adonire.com/wp-content/plugins/woo-product-bundle/assets/css/frontend.css?ver=5.8.6 IP139.144.66.116:0
File typeASCII text, with very long lines (1340), with CRLF line terminators Hasheba64ee2d2c2042248b7d915fde399ca 9ea124c68361117fe45ffa95988cc2bb77c2fa46 dbe8368737891cac9f7c8bcd1f35f2d28b80727029fe850dfc76a8b059072b85
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woo-product-bundle/assets/css/frontend.css?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 20:52:05 GMT
accept-ranges: bytes
content-length: 8250
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=5.8.6 | 139.144.66.116 | 200 OK | 9.2 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=5.8.6 IP139.144.66.116:0
File typeASCII text, with very long lines (9152), with no line terminators Hash2151f6abfde142cc09ec939cfcabbf1c db949218a3c168ea57d4fe9b4196db26140181a8 5fcc39111ad0815edcaaa3b1e2364e362c1c43f8fc588a0a6548ee947713e312
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 9152
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/themes/adnoire_main/js/priority-menu.js?ver=20181214 | 139.144.66.116 | 200 OK | 5.4 kB |
URL HTTP/2adonire.com/wp-content/themes/adnoire_main/js/priority-menu.js?ver=20181214 IP139.144.66.116:0
Hash4be27e262a6d42fbc85440f90c4749af 4de71b46bf5c36e4f55b1b0c650b9612ec14a588 492891acff98994bc1b483f33180cc1ba8245cd4a7e8c1c5478a482db0a04e7c
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/adnoire_main/js/priority-menu.js?ver=20181214 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Mar 2021 14:17:46 GMT
accept-ranges: bytes
content-length: 5375
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/popup-notices-for-woocommerce/src/assets/dist/frontend/js/ttt-pnwc.min.js?ver=210322-71758 | 139.144.66.116 | 200 OK | 7.0 kB |
URL HTTP/2adonire.com/wp-content/plugins/popup-notices-for-woocommerce/src/assets/dist/frontend/js/ttt-pnwc.min.js?ver=210322-71758 IP139.144.66.116:0
File typeASCII text, with very long lines (6960), with no line terminators Hash6288a1113443138eb7d45faafb415a27 b1fdee3ceed3e6f94c99623ea2ba30747b94e623 b35404d6895449dd419e7fe7aecfd72cfa37ccc731569170c1b805cc727303ca
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/popup-notices-for-woocommerce/src/assets/dist/frontend/js/ttt-pnwc.min.js?ver=210322-71758 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Mar 2021 07:17:58 GMT
accept-ranges: bytes
content-length: 6960
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 139.144.66.116 | 200 OK | 11 kB |
URL HTTP/2adonire.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP139.144.66.116:0
File typeASCII text, with very long lines (11126) Hash79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
content-length: 11224
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.0.5 | 139.144.66.116 | 200 OK | 6.6 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.0.5 IP139.144.66.116:0
File typeASCII text, with very long lines (6595), with no line terminators Hashe16a8821e5f099c3a619889ea7cf0399 a38e0c736aaf0b019b29b63b00e68c1381502217 a48dea362116d7516a2cf97066a32758d353760ee02dbf900ddff86b02a16473
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.0.5 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:45:33 GMT
accept-ranges: bytes
content-length: 6595
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/elementor/css/post-2478.css?ver=1627421224 | 139.144.66.116 | 200 OK | 12 kB |
URL HTTP/2adonire.com/wp-content/uploads/elementor/css/post-2478.css?ver=1627421224 IP139.144.66.116:0
File typeASCII text, with very long lines (7574), with CRLF, LF line terminators Hash95958cefb35fcf961c958e415dca3d2d ed67ae1be21ac3a62f02518ead876b3774074f28 0bb4df783f4fd3329b49602e956ed78592c23dc03c0bced9529c791cb587caed
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-2478.css?ver=1627421224 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Jul 2021 21:27:04 GMT
accept-ranges: bytes
content-length: 11656
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 | 139.144.66.116 | 200 OK | 9.6 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 IP139.144.66.116:0
File typeASCII text, with very long lines (9172) Hash81b2be18696c4dfe620f7b6d0d75a566 0c3cd7bdf58a65b07e17be39cfe4e386571bb4bd 120aaf6681ca6d34a40c559779f0a0038582a79fce1b868ff901c94d27c89c72
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 9566
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/themes/adnoire_main/js/touch-keyboard-navigation.js?ver=20181231 | 139.144.66.116 | 200 OK | 9.8 kB |
URL HTTP/2adonire.com/wp-content/themes/adnoire_main/js/touch-keyboard-navigation.js?ver=20181231 IP139.144.66.116:0
File typeASCII text, with CRLF line terminators Hash6a7b061e3b3734fc6a3ddd4cc9ded5e2 0ddf8f96a8ef8ccfecb577859f81cc46b0523307 a1e67d39e2ef9683aa0ebe35dca464c0e556d820943be97871e61b44ede31d88
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/adnoire_main/js/touch-keyboard-navigation.js?ver=20181231 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Mar 2021 07:05:27 GMT
accept-ranges: bytes
content-length: 9819
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.7.4 | 139.144.66.116 | 200 OK | 18 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.7.4 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (17637), with no line terminators Hash9bbdbddc8daf66e019a59515d481ef6a b9f6d809f0eb1bd7e6fb08d42650f9377c96988d 80d39702e0f3d7d8359686a4ff20971ef465c1f8d590ed8748079ffd486055c6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.7.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 17639
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 | 139.144.66.116 | 200 OK | 17 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 IP139.144.66.116:0
File typeASCII text, with very long lines (17030) Hashf70a1802d9391308c5916dcd799bcf37 0463ec0df28a5519fbf47b9959be24fc1128580d 302bde25bad462e9e733758301365ccbab66ddfc5612d7a6ee088005a252b4f7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 17076
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 | 139.144.66.116 | 200 OK | 11 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 IP139.144.66.116:0
File typeASCII text, with very long lines (10725) Hash58baf0f238d7afc7ab926b8d51e5b559 8515e5f578269e29c048450f78c107935d325dff 2989e0b9e836cb9de3274d641ec6a58c2052f039e790ddd59b22303930bfdeeb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 10863
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 | 139.144.66.116 | 200 OK | 18 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 IP139.144.66.116:0
File typeASCII text, with very long lines (10019) Hash4601ba55044413706c2022cb6c1c3d05 5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 18468
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 139.144.66.116 | 200 OK | 12 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP139.144.66.116:0
File typeASCII text, with very long lines (12198), with no line terminators Hash3819c3569da71daec283a75483735f7e ecd40a5cc6f0b76200c454ca880210dc301cfab8 214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 12198
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=6.11.2 | 139.144.66.116 | 200 OK | 22 kB |
URL HTTP/2adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=6.11.2 IP139.144.66.116:0
Hash1aecf6a8b61498b6418a123cc25afd22 b12b002eb6c991f205d8ea17fe9c29c56e00b721 2b5f00285b93abb875bec31fd7791fe409ed633b39156351b3ae6aabe035cef0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=6.11.2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:46:42 GMT
accept-ranges: bytes
content-length: 21850
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.2 | 139.144.66.116 | 200 OK | 22 kB |
URL HTTP/2adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.2 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (21440) Hash35f5e5a982eb8794d7de9225a4e59392 9b5965f64f6a9e64e4d06da8ca7d82da8d297c5d 080ffc54588298b3c11323b2a353ca75ca830a04fe534aee4b1f6fe7600562c0
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:46:42 GMT
accept-ranges: bytes
content-length: 21779
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 | 139.144.66.116 | 200 OK | 15 kB |
URL HTTP/2adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (14924), with no line terminators Hash157f18464a93eab7fb62a7f3e618ac2c f47727e80d529d6e4941fea32f2e8a8ee5008b8a 9ed8f2a0e573467348e64fb1945eeac1698f32af9e9c723153eb7142d6a43306
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Mar 2021 14:16:06 GMT
accept-ranges: bytes
content-length: 14927
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woo-product-bundle/assets/js/frontend.js?ver=5.7.7 | 139.144.66.116 | 200 OK | 16 kB |
URL HTTP/2adonire.com/wp-content/plugins/woo-product-bundle/assets/js/frontend.js?ver=5.7.7 IP139.144.66.116:0
Hashb0aeb1a0a3a84cdd54c7fe89860e376a 15aeaed1ee4e24ddd1b842624f32a50cad71921c ab577490b972aed11fa3483f19d8c58c3f7584db869943b7ec0be7062899f61e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woo-product-bundle/assets/js/frontend.js?ver=5.7.7 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 20:52:05 GMT
accept-ranges: bytes
content-length: 15743
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 | 139.144.66.116 | 200 OK | 18 kB |
URL HTTP/2adonire.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 IP139.144.66.116:0
File typeASCII text, with very long lines (15224) Hash116c86c56f8db0bb63f15ceda50fdc98 75e308982ecf7cd43644b8b426e6aa1a0b0fbe26 def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 05 Aug 2021 11:20:35 GMT
accept-ranges: bytes
content-length: 18181
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.0.20 | 139.144.66.116 | 200 OK | 29 kB |
URL HTTP/2adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.0.20 IP139.144.66.116:0
File typeASCII text, with very long lines (29253), with no line terminators Hash0826f9aa4b7e761ea6044f29ba8e432a 7d3bec8f54ca99e00442ca3ae0026153376f80be 1cc1d2811dc382e9ea8c475cd9ad79b20227fb8a33e6b5225587f58134d99b77
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.0.20 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Mar 2021 14:16:07 GMT
accept-ranges: bytes
content-length: 29253
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/elementor/css/post-216.css?ver=1627747569 | 139.144.66.116 | 200 OK | 29 kB |
URL HTTP/2adonire.com/wp-content/uploads/elementor/css/post-216.css?ver=1627747569 IP139.144.66.116:0
File typeASCII text, with very long lines (27107) Hash2351d29c630c0788181c5181221df20a 0bdb368948fdcfda7bd1bec7214bd6f9d0d3f9fc 32b1db161b0255963b5bc1b9846e7c254707692e44505460fdbbf27b3d4cbc17
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-216.css?ver=1627747569 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Jul 2021 16:06:09 GMT
accept-ranges: bytes
content-length: 28778
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 | 139.144.66.116 | 200 OK | 31 kB |
URL HTTP/2adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 IP139.144.66.116:0
File typeASCII text, with very long lines (30441) Hashd3ec229e04c8634c88cc4cb3f2934c11 785cb4beecaad98329fff0a54f9a5536cda200ab 73835f9dd494931cd0562ab2d4db8aaf3d54dca375abade1794ad1a12ae0d97c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Mar 2021 14:16:07 GMT
accept-ranges: bytes
content-length: 30603
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 | 139.144.66.116 | 200 OK | 22 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 IP139.144.66.116:0
File typeASCII text, with very long lines (21592), with no line terminators Hashe2335332e53dd86db3fb0c9fc25457af 9c2a6a68bbc2276abab96358fe2a54b014982cb9 d80483c2fe131fd9d01d51b0378e0c3e2a7571e91f4f0fbd37de6276a1b464d7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 21592
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 | 139.144.66.116 | 200 OK | 21 kB |
URL HTTP/2adonire.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 IP139.144.66.116:0
File typeASCII text, with very long lines (7973) Hash49fa677b9cd7ddf221dc06537b35e10f 7485f3f99c3c1a57197f2b099f3f8d68b8609d06 0cd851e5b33af0fbb354df65506da39807b998e07723f3d08aba5179fa2ed97e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 09:00:16 GMT
accept-ranges: bytes
content-length: 20787
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 | 139.144.66.116 | 200 OK | 37 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 IP139.144.66.116:0
File typeASCII text, with very long lines (37217) Hashed8de4f9a94259e5bc6e81d7857c76e4 0f9330d1551934bf28e3afc4bd63366df88e9ca7 420ad608fcb00c75b037c32408d72fabd863eb70b707a36f93dd00f4bda513e9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 37256
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.0.20 | 139.144.66.116 | 200 OK | 24 kB |
URL HTTP/2adonire.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.0.20 IP139.144.66.116:0
File typeHTML document, ASCII text, with very long lines (23786), with no line terminators Hashee25b90ebd17857ee7a438a86ba18efe 1685091c989758b5ed796a597e6b1799b321091b 337f6bf5e017c4224a7fe7fbb635d00535ca31d1efdb74797dae04e1e6ee3776
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.0.20 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Mar 2021 14:16:06 GMT
accept-ranges: bytes
content-length: 23786
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 | 139.144.66.116 | 200 OK | 25 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 IP139.144.66.116:0
File typeASCII text, with very long lines (25115) Hash046405de007ff73e52d17dab2af75258 887cfb8a9de27005875f6e1c1d1ead43bd0865c8 533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:45:33 GMT
accept-ranges: bytes
content-length: 25202
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 | 139.144.66.116 | 200 OK | 60 kB |
URL HTTP/2adonire.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators Hash6965137b6996c7953be805866df582ed 7fa546bdc941a31224fcc0b64c75d30f23630583 b86f3cdcccad303cb5300fab4d2774eafc3a2788f07ff1f3cd1953dd0debaa3f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:47:34 GMT
accept-ranges: bytes
content-length: 60053
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.7.4 | 139.144.66.116 | 200 OK | 62 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.7.4 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (62497), with no line terminators Hasha5aecabff1e91f708586e81f991e450a b58aec5b2776053a1c0d2d319b79a0e7473d1921 ae3f857e0ecebdf3782b884b2bb1937e67b065af2f5f1c813588cb94d4c8ba82
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.7.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 62511
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 | 139.144.66.116 | 200 OK | 65 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (43289), with LF, NEL line terminators Hash2aa14a960a066b954dfacb7ce9b6d192 525bbddc67adda7e9b1960ff5aac621922abdeb3 dea0ad73f4973782017880f1dce0af21a946d0e21a07df4c5b98eced5ebb40b1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 64914
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 | 139.144.66.116 | 200 OK | 58 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 IP139.144.66.116:0
File typeASCII text, with very long lines (57726) Hash3df0b27b3e75de7efd800af1d77d56cc e8138ee186548f18db7642d80860124b86809446 f8d00356859998784bda26e1d14f2d981515921b96ded50d5d6f6f0e75bac15c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 57912
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/themes/adnoire_child/style.css?ver=5.8.6 | 139.144.66.116 | 200 OK | 55 kB |
URL HTTP/2adonire.com/wp-content/themes/adnoire_child/style.css?ver=5.8.6 IP139.144.66.116:0
File typeassembler source, Unicode text, UTF-8 text Hashc8c2e73c9fa2efcda8e5fced325240cb 880e29864e3a5fcc8d38a75c304685567c598b83 4f0c0002597338a8798d79997121b643d641431e8802f4beab41faf3c2fb9e02
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/adnoire_child/style.css?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Aug 2021 19:44:26 GMT
accept-ranges: bytes
content-length: 55242
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/elementor/css/global.css?ver=1623511327 | 139.144.66.116 | 200 OK | 50 kB |
URL HTTP/2adonire.com/wp-content/uploads/elementor/css/global.css?ver=1623511327 IP139.144.66.116:0
File typeASCII text, with very long lines (20404) Hash532712249e258cc9927dd7db6390c8a6 9958e6acd87cc722ba8928087c53ddee35cd52e3 4e5ab3a0c5c5cf895f5fd672d27cab696835c2ec38335b46c3f8522d834b972c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/global.css?ver=1623511327 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Jun 2021 15:22:07 GMT
accept-ranges: bytes
content-length: 50328
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 | 139.144.66.116 | 200 OK | 81 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 IP139.144.66.116:0
File typeASCII text, with very long lines (65497) Hashdce958afb428dd3dc78f203ef99bae42 36ec6a22853e4212cfa7d150e9486200c943fe63 26d2072b425a61e1ed81ed2b3f254888531e62060c7c4b3c788ffb925a8c864e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 80963
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 139.144.66.116 | 200 OK | 90 kB |
URL HTTP/2adonire.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP139.144.66.116:0
File typeASCII text, with very long lines (65447) Hash02dd5d04add4759122013c5ab4dc5cc2 a45a56e396ac549b4ff39b696ce9e0c16a7612de bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 05 Aug 2021 11:20:36 GMT
accept-ranges: bytes
content-length: 89521
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 139.144.66.116 | 200 OK | 139 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP139.144.66.116:0
File typeASCII text, with very long lines (65280) Size139 kB (139153 bytes) Hash15bb2b8491fc7e84137d65f610e1685a cd76b70a5426893e9c022b9a75c50a7c1348e2d0 b23f49f504faa32aac548b6662ffd64412f6738496fab8be38da46c5b7121804
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 139153
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 | 139.144.66.116 | 200 OK | 119 kB |
URL HTTP/2adonire.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 IP139.144.66.116:0
File typeASCII text, with very long lines (41022), with CRLF line terminators Size119 kB (119386 bytes) Hash1eca6ed028850aa07d5f4a003fd7079e 1f02b8c5485108373bdd14a96bb1fe22d72e157b 9556bca5ad5eb24439887d7339fcb687088776bbaa995553aa489c9607cf9e19
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:47:36 GMT
accept-ranges: bytes
content-length: 119386
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.0.5 | 139.144.66.116 | 200 OK | 172 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.0.5 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (39674), with LF, NEL line terminators Size172 kB (172226 bytes) Hash64a17e19546a8eaeb7449982967cfa69 b777ff3056a8dd8c79f93c0125f21ec3909c9802 65115988f62e8284ebc9bbd735c7de493f47ed8ea5a266fddb4c86d4997472fb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.0.5 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:45:33 GMT
accept-ranges: bytes
content-length: 172226
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.2 | 139.144.66.116 | 200 OK | 123 kB |
URL HTTP/2adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.2 IP139.144.66.116:0
File typeASCII text, with very long lines (65315) Size123 kB (122981 bytes) Hash7564e6d9ca44f30e2eab9cb3a9ddd90e e2e34ec71d114f962934587243a69f728d0bcc83 7c75af381f475e4d79a419759d08dea7aaae05d5a86abcca727e369b2d7b0b34
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:46:44 GMT
accept-ranges: bytes
content-length: 122981
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=3.6.0 | 139.144.66.116 | 200 OK | 165 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=3.6.0 IP139.144.66.116:0
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Size165 kB (164668 bytes) Hashcf4c7999a199a2113c779b6490c8cc38 5d9890ce361feaa40b3bae62ee3c51e3fe18c712 98b43ffc9c1b3fe4a293db94596098c461b8ad5e7921ed816353b7e35c3e7d82
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=3.6.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:03 GMT
accept-ranges: bytes
content-length: 164668
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.5 | 139.144.66.116 | 200 OK | 213 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.5 IP139.144.66.116:0
File typeASCII text, with very long lines (65493) Size213 kB (212813 bytes) Hash8c73091b3a46f425894b82a6b0ddcf97 b864c003a276e686cd3152bcac41ab6ef1c25026 0137bf605e9dd220f85d0d569406c4e7f7ced8f7e7fe6d639cb33e56997ae5aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.5 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:45:33 GMT
accept-ranges: bytes
content-length: 212813
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 | 139.144.66.116 | 200 OK | 327 kB |
URL HTTP/2adonire.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 IP139.144.66.116:0
File typeASCII text, with very long lines (64268) Size327 kB (327000 bytes) Hash8a5702feb8810be04c356543d737724b 3385fcee5497e03be43e3bbd17e052bb533f3994 60f59e08903c3d0b70e928af542ded081c10a790b6c198c7026788b77f4256ac
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:47:36 GMT
accept-ranges: bytes
content-length: 327000
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Tue, 08 Nov 2022 18:17:29 GMT
Date: Tue, 08 Nov 2022 17:17:21 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Tue, 08 Nov 2022 18:17:29 GMT
Date: Tue, 08 Nov 2022 17:17:21 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Tue, 08 Nov 2022 18:17:29 GMT
Date: Tue, 08 Nov 2022 17:17:21 GMT
Connection: keep-alive
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-VYF45RJCZ7>m=2oeb20&_p=431010464&cid=209094880.1667927837&ul=en-us&sr=1280x1024&_s=1&sid=1667927837&sct=1&seg=0&dl=https%3A%2F%2Fadonire.com%2Fene%2Fqakbot.zip&dt=Page%20not%20found%20-%20Adonire&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-VYF45RJCZ7>m=2oeb20&_p=431010464&cid=209094880.1667927837&ul=en-us&sr=1280x1024&_s=1&sid=1667927837&sct=1&seg=0&dl=https%3A%2F%2Fadonire.com%2Fene%2Fqakbot.zip&dt=Page%20not%20found%20-%20Adonire&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VYF45RJCZ7>m=2oeb20&_p=431010464&cid=209094880.1667927837&ul=en-us&sr=1280x1024&_s=1&sid=1667927837&sct=1&seg=0&dl=https%3A%2F%2Fadonire.com%2Fene%2Fqakbot.zip&dt=Page%20not%20found%20-%20Adonire&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://adonire.com
Connection: keep-alive
Referer: https://adonire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://adonire.com
date: Tue, 08 Nov 2022 17:17:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Tue, 08 Nov 2022 18:17:29 GMT
Date: Tue, 08 Nov 2022 17:17:21 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Tue, 08 Nov 2022 18:17:29 GMT
Date: Tue, 08 Nov 2022 17:17:21 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg | 34.120.237.76 | 200 OK | 4.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash39446652ee66d20bd73df20f1a29589c 349ea78f3ad0f2f7376ba22e417226b2e06806d7 655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4737
x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQBFkEhLIAMFq_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:49:14 GMT
age: 70087
etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb64fcd58491917edfc8ffb57c1382cd0 edf97aab58dacd11fa52924b1382c2bf1ede5e55 a2c60a2f7780085b4643ab7f521fb6c858ca72c3170e6f3acd2250b9c3b14cc5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12662
x-amzn-requestid: edaa58fb-c3eb-4af0-ad32-be8c7cf14421
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKLHSBoAMFsxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a40-4c35cd455ff7a829756eeb56;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7FjjrCP8dJDZrk38J0SqWxN2Ya4O3-hcO_uW5ULwOQTREh4-MU_szA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:01 GMT
age: 70640
etag: "edf97aab58dacd11fa52924b1382c2bf1ede5e55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd22d633d497f2e25eab580a648c05434 8e549621e4182a257895a03db93e786bd86072a5 2263e6c2417c5a40885359d93939febbb9e94cef1c598b7ef95069d50275bf28
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5978
x-amzn-requestid: e4cff3d7-86a7-44a8-8858-7c893c19e76c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAVFHdWIAMFQZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a86-60d1a8250e0017a3574a6642;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:37:10 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qSguV2gfEtxsoWSMifxQEbIAAqhUDgVom0IWauJEIrFoMA5f17J-GA==
via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:42:26 GMT
age: 70495
etag: "8e549621e4182a257895a03db93e786bd86072a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92bcf73f-5c71-47c9-824d-b8fa1f9af018.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92bcf73f-5c71-47c9-824d-b8fa1f9af018.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4ff4c1be0934222258267f7595f2ecde 5d51855ed7cc6f8cac53eef1730212eb70b28036 49ce70117f2b108ebcff7f8e0ac14b2583eaf6b36a10baff097b35b728ba44d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92bcf73f-5c71-47c9-824d-b8fa1f9af018.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10781
x-amzn-requestid: c5063271-8b84-41d7-899c-958c135541c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAwTF2cIAMF0DQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b34-6b6018d826efae3e3738a7d9;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yfT-BN4Codmr6J5v6xIIIpOG5EaHI1xnOqineRxdeQ3VJ_MmujMZew==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:42:38 GMT
age: 70483
etag: "5d51855ed7cc6f8cac53eef1730212eb70b28036"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7884b85a4b30e918a0b44f73a301a78b f7ae1b83a0199b76dd0d31a21db4072b867e4f37 9576f9ad95c958887de953dee72b267cd0ed7293ed62fb540df76a2d49fac035
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4527
x-amzn-requestid: c3be9447-c43a-48d6-9aef-c0999742886c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQA1GFN5IAMFaRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b53-3bb315de52dcf6114da9ad05;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _nFA59k8ERwiA6Ct_pZJs0WkFuagosyyiOkeQc1PuWMcno-Lpz4UfA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:42:39 GMT
etag: "f7ae1b83a0199b76dd0d31a21db4072b867e4f37"
content-type: image/jpeg
age: 70482
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.7.4 | 139.144.66.116 | 200 OK | 6.8 kB |
URL HTTP/2adonire.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.7.4 IP139.144.66.116:0
File typeASCII text, with very long lines (6758), with no line terminators Hash98f4e97f86b642bf082c65ae518ad010 e4e05eb15ee57f2cdb00a2a97419c02cfebb2732 5302d7ef47b197c6cc07e5db5152dcce3b6886ac18f727875fe78ba8e8129224
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.7.4 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Mar 2022 08:51:02 GMT
accept-ranges: bytes
content-length: 6758
content-type: text/css
date: Tue, 08 Nov 2022 17:17:21 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/themes/adnoire_main/print.css?ver=5.8.6 | 139.144.66.116 | 200 OK | 4.1 kB |
URL HTTP/2adonire.com/wp-content/themes/adnoire_main/print.css?ver=5.8.6 IP139.144.66.116:0
File typeASCII text, with CRLF line terminators Hash7515b28e986a25fe3306776c4c312af1 f06134f17cfb561620003029f86924f4cc082f37 f111b1f427b5a8a9e99e36afb4c8c53c86ec6af60fe3274e43db9407073e5626
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/adnoire_main/print.css?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Mar 2021 07:05:27 GMT
accept-ranges: bytes
content-length: 4111
content-type: text/css
date: Tue, 08 Nov 2022 17:17:21 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash03fc468285706210a3ce339d5a223c61 fd32b7fa20b5c53cc2aebc09a3defe4c890f61be 9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash03fc468285706210a3ce339d5a223c61 fd32b7fa20b5c53cc2aebc09a3defe4c890f61be 9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://adonire.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:34:08 GMT
expires: Thu, 02 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 510195
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://adonire.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 14:07:32 GMT
expires: Thu, 02 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 529791
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash03fc468285706210a3ce339d5a223c61 fd32b7fa20b5c53cc2aebc09a3defe4c890f61be 9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 17:17:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| adonire.com/wp-content/themes/adnoire_main/js/your-script.js?ver=5.8.6 | 139.144.66.116 | 404 Not Found | 104 kB |
URL HTTP/2adonire.com/wp-content/themes/adnoire_main/js/your-script.js?ver=5.8.6 IP139.144.66.116:0
Size104 kB (104523 bytes) Hashe7b6d36850e97ddb30291d717ceaab13 518d75a646859dadb0944d645cbeeec4d2f55e8c 781fac635027dcb39d8e44d7c1875513aafc0e61e2adde26d7b37ad2281f3ec6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/adnoire_main/js/your-script.js?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://adonire.com/wp-json/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
date: Tue, 08 Nov 2022 17:17:21 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 | 139.144.66.116 | 200 OK | 84 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 IP139.144.66.116:0
File typeWeb Open Font Format (Version 2), TrueType, length 84508, version 1.0\012- data Hash53820ed72e47259e4da471321b703876 8e195a9780c786c0a44b77798578908079bae4e0 02571d9d533a23c1b743c04f0248a0e5f40e86c1da19b229123f50773e4d03cd
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://adonire.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 84508
content-type: font/woff2
date: Tue, 08 Nov 2022 17:17:23 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/2021/03/Layer-13-1.png | 139.144.66.116 | 200 OK | 1.2 kB |
URL HTTP/2adonire.com/wp-content/uploads/2021/03/Layer-13-1.png IP139.144.66.116:0
File typePNG image data, 77 x 21, 8-bit colormap, non-interlaced\012- data Hashc0a4cdd7a283da37f6d4d5ee30e03d7f 530dfc676a8d7fb37e942c2c311da6d100d34f09 6ed009be96b96efeae95e2edd6cded1ac884d842095cd74b8bbc1b35924075e5
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/03/Layer-13-1.png HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 Mar 2021 08:41:07 GMT
accept-ranges: bytes
content-length: 1226
content-type: image/png
date: Tue, 08 Nov 2022 17:17:23 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 | 139.144.66.116 | 200 OK | 80 kB |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 IP139.144.66.116:0
File typeWeb Open Font Format (Version 2), TrueType, length 80300, version 331.-31392\012- data Hash8e1ed89b6ccb8ce41faf5cb672677105 9b592048b9062b00f0b2dd782d70a95b7dc69b83 6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://adonire.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:49 GMT
accept-ranges: bytes
content-length: 80300
content-type: font/woff2
date: Tue, 08 Nov 2022 17:17:23 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/2021/06/SpaceGrotesk-Regular.woff2 | 139.144.66.116 | 200 OK | 85 kB |
URL HTTP/2adonire.com/wp-content/uploads/2021/06/SpaceGrotesk-Regular.woff2 IP139.144.66.116:0
File typePostScript Type 1 font program data (SpaceGrotesk-Regular 2.000)\012- data Hashdfa1a714f1c40bea8f0154fd75387567 31a852b3641a4445857823ae853ea7d17014658c 4b71f6b1e8ce9ac01598da7e01fd1d625e4f19e3ae83a14e4500c2f9cfa892c7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/06/SpaceGrotesk-Regular.woff2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://adonire.com/wp-content/uploads/elementor/css/post-216.css?ver=1627747569
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Jun 2021 19:01:43 GMT
accept-ranges: bytes
content-length: 85425
content-type: font/woff2
date: Tue, 08 Nov 2022 17:17:23 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.8.6 | 142.250.74.10 | 200 OK | 41 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.8.6 IP142.250.74.10:0
Hash4011d92d2d03ef3f9bd582d3177a05db 30cbd06f09a017f9aea34b11391e3f9158011796 61bc55ef2d0b8e5911fc2c0aa3eccf16ba30dc90dc6846f23dcb4195239c93e2
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.8.6 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 17:17:20 GMT
date: Tue, 08 Nov 2022 17:17:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/2021/06/SpaceGrotesk-Regular.woff | 139.144.66.116 | 200 OK | 74 kB |
URL HTTP/2adonire.com/wp-content/uploads/2021/06/SpaceGrotesk-Regular.woff IP139.144.66.116:0
File typeWeb Open Font Format, CFF, length 73568, version 0.0\012- data Hash09106b3c27ce493630c36e050edb0a72 b127c06b512b6f5def202f8cf74995ae9ca99d5c 9a80dbea302450810c80fbe6b435840a55067119014a0427aa70cad84c504aa1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/06/SpaceGrotesk-Regular.woff HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://adonire.com/wp-content/uploads/elementor/css/post-216.css?ver=1627747569
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Jun 2021 18:59:51 GMT
accept-ranges: bytes
content-length: 73568
content-type: font/woff
date: Tue, 08 Nov 2022 17:17:24 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/2021/03/cropped-image_2021_03_18T10_22_19_942Z-1-192x192.png | 139.144.66.116 | 200 OK | 15 kB |
URL HTTP/2adonire.com/wp-content/uploads/2021/03/cropped-image_2021_03_18T10_22_19_942Z-1-192x192.png IP139.144.66.116:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hashd425422356f1227dfc587b63a4db48bf 0a230a9a2df4478f4e222c16ad891e10e4e43620 4d834f7645a3c395e2bfc29e9cd86cc9a753d031ada6b901be2d50180d36417f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/03/cropped-image_2021_03_18T10_22_19_942Z-1-192x192.png HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Mar 2021 11:15:12 GMT
accept-ranges: bytes
content-length: 14817
content-type: image/png
date: Tue, 08 Nov 2022 17:17:24 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/uploads/2021/03/cropped-image_2021_03_18T10_22_19_942Z-1-32x32.png | 139.144.66.116 | 200 OK | 1.5 kB |
URL HTTP/2adonire.com/wp-content/uploads/2021/03/cropped-image_2021_03_18T10_22_19_942Z-1-32x32.png IP139.144.66.116:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash876d56eccb344ed46e5e5cbee93de1b8 ef9f69ccf03a8ef45bb7e7c03d226e148a2c0187 851447ad303a140eaf3e5dd9975f2fcd1f062786faaee2beffd52b4dff98a542
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/03/cropped-image_2021_03_18T10_22_19_942Z-1-32x32.png HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Mar 2021 11:15:13 GMT
accept-ranges: bytes
content-length: 1495
content-type: image/png
date: Tue, 08 Nov 2022 17:17:24 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/?wc-ajax=get_refreshed_fragments | 139.144.66.116 | 200 OK | 989 B |
URL HTTP/2adonire.com/?wc-ajax=get_refreshed_fragments IP139.144.66.116:0
File typeJSON data\012- , ASCII text, with very long lines (989), with no line terminators Hashc11fca952e2ddc2bb3caeff012537104 79f1b9646fc2971d14091e3697eb4b1385fde242 3ac1db51df650a2ad93299617026393b3934826ba858b317323abda3db8b616a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://adonire.com
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Cookie: _ga_VYF45RJCZ7=GS1.1.1667927837.1.0.1667927837.0.0.0; _ga=GA1.1.209094880.1667927837
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
access-control-allow-origin: https://adonire.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: application/json; charset=UTF-8
date: Tue, 08 Nov 2022 17:17:23 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 | 139.144.66.116 | 200 OK | 0 B |
URL HTTP/2adonire.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 IP139.144.66.116:0
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2021 06:46:50 GMT
accept-ranges: bytes
content-length: 115059
content-type: text/css
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| unpkg.com/micromodal/dist/micromodal.min.js?ver=5.8.6 |  104.16.124.175 | 302 Found | 0 B |
URL HTTP/2unpkg.com/micromodal/dist/micromodal.min.js?ver=5.8.6 IP104.16.124.175:0
GET /micromodal/dist/micromodal.min.js?ver=5.8.6 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 08 Nov 2022 17:17:20 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /micromodal/dist/micromodal.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GHC3Y5ECHBK8Q66W1A6EWPR9-ams
cf-cache-status: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 766ff6291c63b523-OSL
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.2 | 139.144.66.116 | 200 OK | 0 B |
URL HTTP/2adonire.com/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.2 IP139.144.66.116:0
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.2 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Dec 2020 11:46:42 GMT
accept-ranges: bytes
content-length: 129010
content-type: application/javascript
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/ene/qakbot.zip | 139.144.66.116 | 404 Not Found | 0 B |
URL HTTP/2adonire.com/ene/qakbot.zip IP139.144.66.116:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /ene/qakbot.zip HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://adonire.com/wp-json/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
date: Tue, 08 Nov 2022 17:17:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| adonire.com/wp-content/themes/adnoire_main/js/your-script.js?ver=5.8.6 | 139.144.66.116 | 404 Not Found | 0 B |
URL HTTP/2adonire.com/wp-content/themes/adnoire_main/js/your-script.js?ver=5.8.6 IP139.144.66.116:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/adnoire_main/js/your-script.js?ver=5.8.6 HTTP/1.1
Host: adonire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adonire.com/ene/qakbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://adonire.com/wp-json/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
date: Tue, 08 Nov 2022 17:17:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| unpkg.com/micromodal/dist/micromodal.min.js | 104.16.124.175 | 302 Found | 0 B |
URL HTTP/2unpkg.com/micromodal/dist/micromodal.min.js IP104.16.124.175:0
GET /micromodal/dist/micromodal.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://adonire.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 08 Nov 2022 17:17:20 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /micromodal@0.4.10/dist/micromodal.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GHC3HEEFDTQK7KB1W1TW0XPA-ams
cf-cache-status: HIT
age: 417
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 766ff6297d09b523-OSL
X-Firefox-Spdy: h2
|
|